CVE-2020-36548

MEDIUM

GE Voluson S8 Firmware - Improper Authentication via users.cgi

Title source: llm

Description

A vulnerability classified as problematic has been found in GE Voluson S8. Affected is the file /uscgi-bin/users.cgi of the Service Browser. The manipulation leads to improper authentication and elevated access possibilities. It is possible to launch the attack on the local host.

References (2)

Core 2

Core References

Various Sources x_refsource_misc

https://www.scip.ch/?news.20200701

Permissions Required, VDB Entry x_refsource_misc

https://vuldb.com/?id.129834

Scores

CVSS v3 5.9

EPSS 0.0022

EPSS Percentile 12.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-287

Status published

Products (1)

ge/voluson_s8_firmware

Published Jun 17, 2022

Tracked Since Feb 18, 2026